⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2022-40684

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

FortiOS/FortiProxy/FortiSwitchManager authentication bypass — mass exploitation with thousands of compromised devices. Apply patches or disable remote management. Chinese APT exploited this before public disclosure. This is the fourth major FortiOS critical since 2018.

📋 Official Description

An authentication bypass using an alternate path or channel in Fortinet FortiOS, FortiProxy, FortiSwitchManager allows an unauthenticated attacker to perform operations on the administrative interface.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →